PT-2025-52966 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-24 · CVE-2023-54009

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The cdns i2c master xfer() function in the Linux kernel has a runtime power management (PM) leak on an error path. The function acquires a runtime PM reference upon entry and releases it upon normal exit. However, a specific error path causes the function to exit without releasing this reference, resulting in a leak. The issue is present in the cdns i2c master xfer() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54009

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 975

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54009.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54009 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54009 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54009 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54009 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54009 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54009 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54009 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54009 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note